Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
File:                     zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft (raw, json)
Hash identifier:          6uU5xoxsY7C6J649rI+CZ2Un2lzs/n/lMhnlzBfSBlQ=
Subject key identifier:   95:D3:F1:B3:00:C4:28:80:82:D5:47:B1:B3:1D:5D:4F:2D:C5:97:D6
Authority key identifier: CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
Certificate issuer:       /CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Certificate serial:       01962ECFB4D4324E8A4ACC641F9B8CF59AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
Manifest number:          0BD1
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: ZAf_TODdz2GvAFp8P1cZfLoHZ80.roa (hash: 9Jk74qPLddxgXTpIwOhtoLR2sBPTBQ9n+Rt24Gzi21Q=)
                          2: zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl (hash: wOovLLl3oGIomKxrkAPMeVb0Hzw8qd5/XRrYDwrsG9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b4:d4:32:4e:8a:4a:cc:64:1f:9b:8c:f5:9a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=95d3f1b300c4288082d547b1b31d5d4f2dc597d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:5b:3c:24:08:24:3e:ac:44:98:91:f3:81:
                    9c:ad:c2:23:3d:81:82:c0:9a:ae:47:7d:34:34:15:
                    bd:a2:dc:99:50:21:ad:69:93:42:26:b7:5d:05:5b:
                    d6:88:29:a0:e9:2d:d0:6b:58:65:50:3e:c6:c9:eb:
                    3a:32:cc:2c:af:0a:5c:fb:16:5a:8d:09:c7:6a:ed:
                    a7:ed:36:e9:94:b6:21:f9:72:f9:7b:0e:a2:25:33:
                    22:47:e0:d8:e8:89:6f:e5:25:bd:eb:93:94:6f:5b:
                    e1:3c:c2:91:82:76:93:cd:52:d5:92:c0:bc:c3:29:
                    ef:72:29:91:7e:69:75:99:45:f9:0a:ff:89:29:f2:
                    dc:fb:6f:39:0c:25:bc:00:21:10:f2:9e:be:66:b1:
                    8d:26:80:28:75:c5:b2:9b:53:3c:54:c0:b5:46:07:
                    82:66:51:a2:d6:94:d0:0c:9c:fa:d1:cd:4b:1d:65:
                    89:08:cf:90:20:a9:50:f0:e6:1f:4f:d1:44:82:48:
                    6a:f1:3a:f5:82:11:79:b4:06:07:4e:12:53:16:26:
                    85:0d:44:23:f4:77:45:be:3d:12:6d:d0:17:5c:66:
                    35:bc:e7:6e:a5:75:2f:c5:fd:22:15:e9:08:9d:62:
                    b7:eb:52:94:20:36:2a:0c:d4:fd:1f:a5:42:b5:76:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:F1:B3:00:C4:28:80:82:D5:47:B1:B3:1D:5D:4F:2D:C5:97:D6
            X509v3 Authority Key Identifier:
                keyid:CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:13:85:12:86:2f:53:48:45:7f:4d:b3:f1:6a:bf:5c:f5:a5:
         9f:33:c1:e1:ca:31:7e:f6:54:2e:ac:f1:d4:92:37:87:9d:5e:
         44:bc:40:d7:50:be:46:c6:ec:cb:c2:bf:73:9c:2a:de:85:d2:
         7b:47:d3:0a:49:0f:7f:11:5e:e6:7c:49:d7:9f:55:93:71:8f:
         f9:87:7a:37:f0:55:37:cb:a4:59:08:52:c1:a4:8c:33:7a:1a:
         24:6f:4b:72:f8:bb:fb:88:1b:08:3f:d3:aa:f3:e1:64:f7:c6:
         1e:5a:ce:f4:87:d2:7a:ad:40:82:70:37:fa:f5:7f:a7:6a:53:
         bc:9d:eb:93:cd:f8:0d:a3:0e:b0:60:d1:d8:b4:93:c0:e5:f5:
         cd:83:73:2b:7a:c8:4a:36:5f:5c:40:6a:a1:08:89:e9:71:11:
         ae:0e:b4:ef:6c:b3:9b:f0:46:99:6b:09:2d:6f:49:25:a6:20:
         e3:63:12:33:aa:26:67:97:72:a8:f3:36:56:de:bd:43:78:a0:
         a3:79:f6:11:2a:80:26:44:1f:0f:7d:0e:cd:c0:45:19:4f:23:
         47:3d:c4:06:b4:00:5c:d7:83:4b:11:72:7e:ff:45:f8:f2:8f:
         2d:2f:65:c4:db:09:ee:ae:bd:36:af:8a:9c:27:5f:c8:5f:d7:
         f5:e9:17:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7TUMk6KSsxkH5uM9ZrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTU1N2IyYzNhZGZiYjI1ZDM3ZWEyYTJkZmQxOWIyZDRl
YTUxMGUwHhcNMjUwNDEzMTEwMTI2WhcNMjUwNDE0MTEwMTI2WjAzMTEwLwYDVQQD
Eyg5NWQzZjFiMzAwYzQyODgwODJkNTQ3YjFiMzFkNWQ0ZjJkYzU5N2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8BbPCQIJD6sRJiR84GcrcIjPYGC
wJquR300NBW9otyZUCGtaZNCJrddBVvWiCmg6S3Qa1hlUD7Gyes6Mswsrwpc+xZa
jQnHau2n7TbplLYh+XL5ew6iJTMiR+DY6Ilv5SW965OUb1vhPMKRgnaTzVLVksC8
wynvcimRfml1mUX5Cv+JKfLc+285DCW8ACEQ8p6+ZrGNJoAodcWym1M8VMC1RgeC
ZlGi1pTQDJz60c1LHWWJCM+QIKlQ8OYfT9FEgkhq8Tr1ghF5tAYHThJTFiaFDUQj
9HdFvj0SbdAXXGY1vOdupXUvxf0iFekInWK361KUIDYqDNT9H6VCtXau3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXT8bMAxCiAgtVHsbMdXU8txZfWMB8GA1UdIwQY
MBaAFMwVV7LDrfuyXTfqKi39GbLU6lEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMjVlZjUtNjdiZi00NjNiLTg1OGIt
YTU2ZGM1MDEyMWRkLzEvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lMjVlZjUtNjdiZi00NjNiLTg1OGItYTU2ZGM1MDEyMWRk
LzEvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhOFEoYv
U0hFf02z8Wq/XPWlnzPB4coxfvZULqzx1JI3h51eRLxA11C+Rsbsy8K/c5wq3oXS
e0fTCkkPfxFe5nxJ159Vk3GP+Yd6N/BVN8ukWQhSwaSMM3oaJG9Lcvi7+4gbCD/T
qvPhZPfGHlrO9IfSeq1AgnA3+vV/p2pTvJ3rk834DaMOsGDR2LSTwOX1zYNzK3rI
SjZfXEBqoQiJ6XERrg6072yzm/BGmWsJLW9JJaYg42MSM6omZ5dyqPM2Vt69Q3ig
o3n2ESqAJkQfD30OzcBFGU8jRz3EBrQAXNeDSxFyfv9F+PKPLS9lxNsJ7q69Nq+K
nCdfyF/X9ekXkg==
-----END CERTIFICATE-----